new file:   cert-stealer.sh